sect409r1

The elliptic-curve cryptography^{[118][119][120][121]} is an approach to public-key cryptography^{[164][165][166]} based on the elliptic curve^[116][117]s. The most important property in terms of encryption strength, beyond the designer is elliptic curve key size^{[292][293][294]}. All the key sizes available are considered secure, so there is no consideration about it.

The elliptic-curve cryptography^{[118][119][120][121]} is an approach to public-key cryptography^{[164][165][166]} based on the elliptic curve^[116][117]s. Note that there is controversy^{[287][288][289][290][291]} around some of the National Institute of Standards and Technology^[470][471] designed elliptic curveselliptic curves designed by NIST^[285][286]. This elliptic curve designed by independent researcher^[284] Daniel J. Bernstein^[476][477] and there is no evidence for any compromise.

Add at least one elliptic curve to the list of elliptic curves supported by your server designed by independent researchers and prefer them as server configuration makes it possible.

The elliptic curve^[116][117] cryptography provides no protection against a cryptanalytic attack by a quantum computer, and no classical elliptic curve does — just as classical Diffie-Hellman does not — because a quantum computer breaks the hardness assumption they rely on. Only a hybrid key exchange (a classical algorithm combined with a post-quantum cryptography^[158][159] one) or a pure post-quantum algorithm is quantum-safe.

Enable a hybrid key exchange or a pure post-quantum algorithm on your server, and prefer it where the configuration allows, so the connection stays secure against a future quantum computer.